Jump to content

Recommended Posts

I had to set up a couple vlans on my LAN in a linksys WRT54G , I have two webservers that I needed to isolate from the rest , there's two static IP's, as well as DHCP enabled on vlan2, and have dyndns addys for obvious reasons. There working as they should. There all local machines so before setting the isolated vlans I was able to use real vnc to administer them, they can be reached remotely and all is good. However, I still need to admin them, but the way the code is written, I can't access them locally via the vnc client, but they can be reached on the same vnc client from a remote machine. But this is the way I wanted it, other then allowing local access across vlans, I didn't take that inconsideration.

My question is do i need to configure trunking betweeen the linksys /cisco router, and the cisco 2924 XL-EN and the 2924 XL, connecting via rollover, or what is the config that I need to allow a management vlan between them.

I should say this config was accomplished by telnetting into the router via putty.

Here's my config~

nvram set vlan0ports="1 2 3 5*"

nvram set vlan2ports="4 5*"

nvram set rc_startup='



ifconfig vlan2 netmask

ifconfig vlan2 up


nvram set rc_firewall='

iptables -I INPUT -i vlan2 -j ACCEPT

iptables -I FORWARD -i vlan2 -o vlan1 -m state --state NEW -j ACCEPT

iptables -I FORWARD -i vlan2 -o ppp0 -m state --state NEW -j ACCEPT

iptables -I FORWARD -i br0 -o vlan2 -j logdrop


nvram commit

and here's my dns masq config for the webservers ~



Here's the layout of my network ~

                  WTR54G-----------Vlan 2 port 4------------------> server 1 & 2

                  |     |

                  |     |

                  |     |

                  |     cisco 2924 XL (dummy) port 1 ------------- ftp server 1 / ftp server 2 / other local machines



        Cisco 2924 XL-EN (dummy for now then it will be the main switch later)

            |                 |

            |                 |

            |              admin station


        NAS/ NAS / hp 380 G3 & iLo port

  There's alot more, but it's irrelevant for my question, I'm sure it's simple , but my studies havent' gotten that far.

  I know it's in this line right here, I just don't know the language  " iptables -I FORWARD -i br0 -o vlan2 -j logdrop "

Link to post
Share on other sites

Join the conversation

You can post now and register later. If you have an account, sign in now to post with your account.
Note: Your post will require moderator approval before it will be visible.

Reply to this topic...

×   Pasted as rich text.   Paste as plain text instead

  Only 75 emoji are allowed.

×   Your link has been automatically embedded.   Display as a link instead

×   Your previous content has been restored.   Clear editor

×   You cannot paste images directly. Upload or insert images from URL.

  • Create New...